How to remove “Strictor.275304”?

The Strictor.275304 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Strictor.275304 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the RedLine malware family
Binary compilation timestomping detected

How to determine Strictor.275304?


File Info:
name: 7A4E1E284CB7F4CCC565.mlw
path: /opt/CAPEv2/storage/binaries/f4404922b338675f63e1896d458ebadccf758f4ff8f53ad9795989bce16f2eba
crc32: 6C2C3F79
md5: 7a4e1e284cb7f4ccc5656794b67a874c
sha1: 63eac5034e409933e3623eb35870adf461033794
sha256: f4404922b338675f63e1896d458ebadccf758f4ff8f53ad9795989bce16f2eba
sha512: f16172d2d751a46cf8923057dfe82ab870dff13913187cdaf29d6f4e35bd55694b866e764d38aac2ca908e1fe9628e635ec0711488a4510a73f21c9b46b0ce10
ssdeep: 6144:1puUjaE0ZtsIFqjV4exWfwffejQmpT3IGrDQDLfSdacflt/MEdj8bobdHx1Lvi:vuUjaInxWfLjRxgHItFTd88ji
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BDC41A17B997DE51C2981732C4BA880057B8DAC17B93E70F3D8E23A658033BADD86D57
sha3_384: 91d1832261b10071d1fb047c1b55bc42e83c651ba49f056da401ad644e4cc38a3baab1dd41dc4ce4cf68393eddc454e9
ep_bytes: ff250020400000000000000000000000
timestamp: 2078-04-27 17:07:30

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 5K Player
FileVersion: 6.9.0.0
InternalName: Cambrel.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Cambrel.exe
ProductName: 5K Player
ProductVersion: 6.9.0.0
Assembly Version: 6.7.0.0

Strictor.275304 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Strictor.275304
ClamAV	Win.Malware.Trojanx-9862538-0
FireEye	Generic.mg.7a4e1e284cb7f4cc
Cylance	Unsafe
VIPRE	Gen:Variant.Strictor.275304
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Spyware ( 0057a2d41 )
K7GW	Spyware ( 0057a2d41 )
tehtris	Generic.Malware
ESET-NOD32	a variant of MSIL/Spy.RedLine.B
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-PSW.MSIL.Reline.gen
BitDefender	Gen:Variant.Strictor.275304
Ad-Aware	Gen:Variant.Strictor.275304
Emsisoft	Gen:Variant.Strictor.275304 (B)
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.MSIL.Spy
GData	MSIL.Trojan-Stealer.Redline.G
MAX	malware (ai score=84)
Arcabit	Trojan.Strictor.D43368
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Reline.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5237238
Acronis	suspicious
VBA32	Malware-Cryptor.MSIL.AgentTesla.Heur
ALYac	Gen:Variant.Strictor.275304
Malwarebytes	Spyware.DiscordStealer.MSIL
Rising	Stealer.Agent!1.DC63 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZemsilCO.34796.Hm0@aaFIFqe
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Strictor.275304?

Strictor.275304 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X